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IN THE SPECIFICATION 

Please amend the Title at p. 1, 11. 1-4 as follows: 

METHOD OF AUTHENTICATION AND PAYMENT, OPERATION METHOD OF AN 

AUTHENTICATION AND PAYMENT SYSTEM, TERMINAL DEVICE, SERVICE 

PROVIDING DEVICE, AUTHENTICATION AND PAYMENT DEVICE, AND 

CONTROL INFORMATION PROVIDING DEVICE A SERVICE PROVISION SYSTEM 

USING A CERTIFICATE OF SERVICE ISSUED FROM AN AUTHENTICATION AND 

PAYMENT DEVICE 

Please amend the paragraph at p. 1, 11. 17-27, as follows: 

Such as onlin e shopping Using the Internet or a cellular phone for the purchase of 
beverages, foods, books and others, online distribution of music and video contents and usage 
of network services , thos e use th e Int e rn e t or c e llular phon e s as paym e nt m e ans, ar e so call e d 
is commonly referred to as "e-commerce". E-commerce now has become widely used 
around the world . This e comm e rc e e nabl e s us to , and allows for the purchase products or to 
use software services without cash payment. Conventional procedures of e-commerce are 
described in patent publication (1) (Japanese Laid-open Patent Application 2001-148048) and 
non-patent publication (1) ("MeT WAP Shopping", 

http://www.mobiletransaction.ord/pdf/Rl 1/Met-WAP-Shopping-Rl 1 .pdf). Th e s e prior arts 
d e scrib e m e thods of paym e nt carried out for each transaction. 

Please amend the paragraph at p. 1, 1. 28 - p. 2, 1. 2, as follows: 
However, these methods cannot satisfy required conditions in purchasing some kinds 
of products or services. For instance, when a user purchases a beverage outside by using a 
cellular phone, he/she claims to obtain it immediately. Under the present circumstances, 
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however, it takes a few seconds or a few tens of seconds from the beginning to the end of the 
purchasing procedure. It k ee ps th e us e r to wait for a minut e . 

Please amend the paragraph at p. 2, 11. 10-14, as follows: 

Since there is a time lag between a usage of service and [[its]] settlement, even if an 
amount of money charged for each service is small, the total payment for a user tends to 
quickly accumulate r e ach high when he/she repeats to use the service many times. In this 
case, the service provider, called "provisional agent", has to bear the risk. 

Please amend the paragraph at p. 1 1, 1. 32 - p. 12, 1. 6, as follows: 
Each element of the authentication and payment system of the present invention has 
an environment 104, 106 or 108 and policy 105, 107 or 109 for network connection. The 
environment [[is]] defines parameters such as performance of the terminal, type and 
bandwidth of the network and transmission rate. The policy [[is]] defines parameters such as 
requirement for security strength to transmit messages transmitt e d on a communication 
channel, requirement for rate and response speed. 

Please amend the paragraph at p. 16, 1. 27 - p. 17, 1. 7, as follows: 
Furthermore, it is possible to arrange the terminal 102 not to operate according to the 
control information as set forth above, but to obtain a software program containing 
information equivalent to the control information and run the software in order to realize 
required operations. Additionally, to meet with this arrangement, it is also possible to 
arrange the control information providing device 1 1 1 to provide the software program to the 
terminal. Moreover, in generating the software program, it is possible to arrange the software 
program so as to contain every function described by WSDL or WSFL, or, based on 



3 



Application No. 10/673,239 

Reply to Office Action of January 22, 2009 

interpretation of WSDL or WSFL description, so as to contain only necessary functions 
correspondent to the ability of the terminal. The As a language for th e software program te 
b e g e n e rat e d h e re, may be written in the JAVA (a product name) language , for instance, 
however any other suitable software language may be used is usabl e. 

Please amend the paragraph at p. 17, 1. 20 - p. 18, 1. 3, as follows: 
In the steps S101 through SI 03, a device judges whether or not it is necessary to 
increase the strength of security is n e c e ssary to bo raised according to a type of network 
obtained from information of a network message format, an amount of calculation required 
for SSL processing and information of a user's preference whether he/she attaches importance 
to the security or the speed of a payment. When the device decides that the increase of the 
strength of security is necessary, it establishes a connection by SSL. By using this method, it 
is possible to properly select use or non-use of SSL according to the case wherein the 
increase of strength of security is necessary, such as the case of using the Internet for 
communications between the terminal 102 and the service providing device 103, or the case 
wherein the guarantee of the security is sufficient, such as the case of using the infrared 
communications between them because they are located very closely. Consequently, it 
becomes possible to assure the security for a network of insufficient security and the high- 
speed processing for a network of sufficient security. 

Please amend the paragraph at p. 20, 11. 1 1-24, as follows: 
For the terminal 102, it is possible to arrange the service procedure changeable 
according to the content of the certificate of service, its policy and environment. For 
instance, it is possible to send information that is needed for payment, and which is also 
capable of informing the uniqueness and reliability of the certificate of service and is needed 



4 



Application No. 10/673,239 

Reply to Office Action of January 22, 2009 

for paym e nt . That information is a part of information of the certificate of service, such as an 
identifier of the certificate of service, an identifier of the authentication and payment 
device 101 that has issued the certificate of service, a digital signature attached by the 
authentication and payment device 101 and/or information of the reference amount. It is also 
possible to change the processing method according to the amount of payment. In case 
wherein the terminal attaches a digital signature, an identifier of the signer should be the 
same as the identifier of the certificate of service issued by the authentication and payment 
device. 

Please amend the paragraph at p. 22, 11. 1 1-20, as follows: 
In case wherein the terminal has sent a part of information extracted from the 
information of the certificate of service, the service providing device can make inquires about 
the content of the corresponding data to the authentication and payment device 101. The 
part of information extracted from the information of the certificate of service may include 
information such as an identifier of the certificate of service, an identifier of the 
authentication and payment device 101 that has issued the certificate of service, a digital 
signature attached by the authentication and payment device 101 as the information being 
capable of informing the uniqueness and reliability of the certificate of service 120, and the 
procedure of service provision can not be defined solely by these pieces of information^-the 
s e rvic e providing d e vic e can mak e inquir e s about th e cont e nt of th e corr e sponding data to the 
auth e ntication and payment device 101 . 

Please amend the paragraph at p. 24, 11. 24-32, as follows: 

In the step S501, the service providing device 103 judges whether or not to issue 
issu e s a request for authentication and payment. In case wherein it judges to issue the 
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request, the service providing device 103 reads out accumulated information of the 
authentication and payment in the step S502, and generates the request for authentication and 
payment to send to the authentication and payment device 101 in the step S503. The service 
providing device 103 sends a receipt to the terminal 102 when the request for authentication 
and payment is successfully accepted by the authentication and payment device 101 in the 
step S504. 

Please amend the paragraph at p. 25, 11. 14-18, as follows: 

In the step S601 r 4f the authentication and payment device 101 receives a certain 
request from the other device, [[it]] and selects , at step S602, one of a plurality of processing 
paths based as th e following proc e ssing dep e nd e nt on whether it has received a the request is 
for a certificate of service or is a request for an authentication and payment at th e following 
stop S602 . 
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